Bug 650630

Summary: kdesu password-keeping does not work
Product: [Fedora] Fedora Reporter: Christian Jann <christian.jann>
Component: kdebase-runtimeAssignee: Than Ngo <than>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 14CC: jreznik, kevin, ltinkl, ossi, rdieter, rnovacek, ry, smparrish, than, thomasj
Target Milestone: ---Keywords: EasyFix, Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: kdegames-4.5.3-3.fc14 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-11-17 23:18:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Christian Jann 2010-11-07 13:55:17 UTC 
Description of problem:

If I run:
kdesu -c "touch /root/test"
kdesu -c "touch /root/test" 
two times it will ask me every time for the password and on the console I can
see “kdesu(3277) startApp: Daemon not safe (not sgid), not using it.”

After executing:
sudo groupadd nogroup
sudo chown root:nogroup /usr/libexec/kde4/kdesud
sudo sudo chmod g+s /usr/libexec/kde4/kdesud

a new checkbox appears in the kdesu dialog with the label “Remember password”
and I can execute kdesu -c "touch /root/test" without being asked for a
password again.

Version-Release number of selected component (if applicable):

since Fedora 12

How reproducible:

every time

Steps to Reproduce:
1. kdesu -c "touch /root/test"
   there should be a checkbox with the label “Remember password”
3. kdesu -c "touch /root/test"
   no password dialog should pop up
  
Actual results:

it asks me every time for the password

Expected results:

it will not ask for the password again
execute "konqueror help:/kdesu/sec-password-keeping.html" to see a description

Additional info:

https://bugs.kde.org/show_bug.cgi?id=230566
Comment 1 Oswald Buddenhagen 2010-11-07 14:55:05 UTC 
the condensed version of all that is "kdesud should be installed setgid nogroup, but isn't".

thinking about it again, i have no clue why it needs to be setGid in the first place - that doesn't protect anything. to prevent some other process in the user's session from snatching a saved password, it would have to be setUid ...
Comment 2 Rex Dieter 2010-11-12 15:01:45 UTC 
doh, thanks!
Comment 3 Fedora Update System 2010-11-12 18:00:51 UTC 
akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14
Comment 4 Fedora Update System 2010-11-12 18:06:54 UTC 
akonadi-1.4.1-2.fc13,kde-plasma-yawp-0.3.5-4.fc13,kdeaccessibility-4.5.3-1.fc13,kdeadmin-4.5.3-1.fc13,kdeartwork-4.5.3-1.fc13,kdebase-4.5.3-1.fc13,kdebase-runtime-4.5.3-3.fc13,kdebase-workspace-4.5.3-2.fc13,kdebindings-4.5.3-1.fc13,kdeedu-4.5.3-2.fc13,kdegames-4.5.3-3.fc13,kdegraphics-4.5.3-2.fc13,kdelibs-4.5.3-1.fc13,kdemultimedia-4.5.3-1.fc13,kdenetwork-4.5.3-2.fc13,kdepimlibs-4.5.3-2.fc13,kdeplasma-addons-4.5.3-1.fc13,kdesdk-4.5.3-3.fc13,kdetoys-4.5.3-1.fc13,kdeutils-4.5.3-1.fc13,oxygen-icon-theme-4.5.3-1.fc13,kde-l10n-4.5.3-1.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc13,kde-plasma-yawp-0.3.5-4.fc13,kdeaccessibility-4.5.3-1.fc13,kdeadmin-4.5.3-1.fc13,kdeartwork-4.5.3-1.fc13,kdebase-4.5.3-1.fc13,kdebase-runtime-4.5.3-3.fc13,kdebase-workspace-4.5.3-2.fc13,kdebindings-4.5.3-1.fc13,kdeedu-4.5.3-2.fc13,kdegames-4.5.3-3.fc13,kdegraphics-4.5.3-2.fc13,kdelibs-4.5.3-1.fc13,kdemultimedia-4.5.3-1.fc13,kdenetwork-4.5.3-2.fc13,kdepimlibs-4.5.3-2.fc13,kdeplasma-addons-4.5.3-1.fc13,kdesdk-4.5.3-3.fc13,kdetoys-4.5.3-1.fc13,kdeutils-4.5.3-1.fc13,oxygen-icon-theme-4.5.3-1.fc13,kde-l10n-4.5.3-1.fc13
Comment 5 Fedora Update System 2010-11-14 21:32:52 UTC 
kdegames-4.5.3-3.fc14, kdebase-runtime-4.5.3-3.fc14, kdepimlibs-4.5.3-2.fc14, akonadi-1.4.1-2.fc14, kde-plasma-yawp-0.3.5-4.fc14, kdeaccessibility-4.5.3-1.fc14, kdeadmin-4.5.3-1.fc14, kdeartwork-4.5.3-1.fc14, kdebase-4.5.3-1.fc14, kdebase-workspace-4.5.3-2.fc14, kdebindings-4.5.3-1.fc14, kdeedu-4.5.3-2.fc14, kdegraphics-4.5.3-2.fc14, kdelibs-4.5.3-1.fc14, kdemultimedia-4.5.3-1.fc14, kdenetwork-4.5.3-2.fc14, kdeplasma-addons-4.5.3-1.fc14, kdesdk-4.5.3-3.fc14, kdetoys-4.5.3-1.fc14, kdeutils-4.5.3-1.fc14, oxygen-icon-theme-4.5.3-1.fc14, kde-l10n-4.5.3-1.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update kdegames kdebase-runtime kdepimlibs akonadi kde-plasma-yawp kdeaccessibility kdeadmin kdeartwork kdebase kdebase-workspace kdebindings kdeedu kdegraphics kdelibs kdemultimedia kdenetwork kdeplasma-addons kdesdk kdetoys kdeutils oxygen-icon-theme kde-l10n'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/akonadi-1.4.1-2.fc14,kde-plasma-yawp-0.3.5-4.fc14,kdeaccessibility-4.5.3-1.fc14,kdeadmin-4.5.3-1.fc14,kdeartwork-4.5.3-1.fc14,kdebase-4.5.3-1.fc14,kdebase-runtime-4.5.3-3.fc14,kdebase-workspace-4.5.3-2.fc14,kdebindings-4.5.3-1.fc14,kdeedu-4.5.3-2.fc14,kdegames-4.5.3-3.fc14,kdegraphics-4.5.3-2.fc14,kdelibs-4.5.3-1.fc14,kdemultimedia-4.5.3-1.fc14,kdenetwork-4.5.3-2.fc14,kdepimlibs-4.5.3-2.fc14,kdeplasma-addons-4.5.3-1.fc14,kdesdk-4.5.3-3.fc14,kdetoys-4.5.3-1.fc14,kdeutils-4.5.3-1.fc14,oxygen-icon-theme-4.5.3-1.fc14,kde-l10n-4.5.3-1.fc14
Comment 6 Fedora Update System 2010-11-17 23:18:09 UTC 
kdegames-4.5.3-3.fc14, kdebase-workspace-4.5.3-3.fc14, kdebase-runtime-4.5.3-3.fc14, kdepimlibs-4.5.3-2.fc14, akonadi-1.4.1-2.fc14, kde-plasma-yawp-0.3.5-4.fc14, kdeaccessibility-4.5.3-1.fc14, kdeadmin-4.5.3-1.fc14, kdeartwork-4.5.3-1.fc14, kdebase-4.5.3-1.fc14, kdebindings-4.5.3-1.fc14, kdeedu-4.5.3-2.fc14, kdegraphics-4.5.3-2.fc14, kdelibs-4.5.3-1.fc14, kdemultimedia-4.5.3-1.fc14, kdenetwork-4.5.3-2.fc14, kdeplasma-addons-4.5.3-1.fc14, kdesdk-4.5.3-3.fc14, kdetoys-4.5.3-1.fc14, kdeutils-4.5.3-1.fc14, oxygen-icon-theme-4.5.3-1.fc14, kde-l10n-4.5.3-1.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 7 Fedora Update System 2010-11-17 23:29:27 UTC 
kdebase-workspace-4.5.3-3.fc13, akonadi-1.4.1-2.fc13, kde-plasma-yawp-0.3.5-4.fc13, kdeaccessibility-4.5.3-1.fc13, kdeadmin-4.5.3-1.fc13, kdeartwork-4.5.3-1.fc13, kdebase-4.5.3-1.fc13, kdebindings-4.5.3-1.fc13, kdeedu-4.5.3-2.fc13, kdegraphics-4.5.3-2.fc13, kdelibs-4.5.3-1.fc13, kdemultimedia-4.5.3-1.fc13, kdenetwork-4.5.3-2.fc13, kdeplasma-addons-4.5.3-1.fc13, kdesdk-4.5.3-3.fc13, kdetoys-4.5.3-1.fc13, kdeutils-4.5.3-1.fc13, oxygen-icon-theme-4.5.3-1.fc13, kde-l10n-4.5.3-1.fc13, kdegames-4.5.3-3.fc13, kdebase-runtime-4.5.3-3.fc13, kdepimlibs-4.5.3-2.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 8 Christian Jann 2010-11-19 17:10:25 UTC 
OK, tested it tody on another machine where I haven't fixed it myself and the update works.